Academy by Coassemble

Step 1: Create an OIDC App in Okta

Go to Applications → Applications → Create App Integration.

- Sign-in method: OIDC – OpenID Connect
- Application type: Web Application

- App name: Coassemble
- Grant type allowed: Authorization Code (required)
- Enable Refresh Token
- Redirect URI:
 https://yourdomain.coassemble.com/security/login/check-custom
- Sign-out redirect URI: (optional) <code>https://yourdomain.coassemble.com</code>

Copy the Client ID and Client Secret — you’ll need these in Coassemble.

1. Log in to Okta Admin Console.
2. Go to Applications → Applications → Create App Integration.
3. Select:
 - Sign-in method: OIDC – OpenID Connect
 - Application type: Web Application
4. Click Next.
5. Configure General Settings:
 - App name: Coassemble
 - Grant type allowed: Authorization Code (required)
 - Enable Refresh Token
 - Redirect URI:
 https://yourdomain.coassemble.com/security/login/check-custom
 - Sign-out redirect URI: (optional) <code>https://yourdomain.coassemble.com</code>
6. Click Save.
7. Copy the Client ID and Client Secret — you’ll need these in Coassemble.

Go to Applications → [Coassemble App] → Assignments → Assign → Assign to People.

Select the users or test group you want to allow SSO access.

1. Go to Applications → [Coassemble App] → Assignments → Assign → Assign to People.
2. Select the users or test group you want to allow SSO access.
3. Ensure status = Active.

Step 3: Configure OAuth in Coassemble

https://&lt;yourOktaDomain&gt;/oauth2/v1/authorize

https://&lt;yourOktaDomain&gt;/oauth2/v1/token

https://&lt;yourOktaDomain&gt;/oauth2/v1/userinfo

- Authorization URL:
 https://&lt;yourOktaDomain&gt;/oauth2/v1/authorize
- Access Token URL:
 https://&lt;yourOktaDomain&gt;/oauth2/v1/token
- UserInfo URL:
 https://&lt;yourOktaDomain&gt;/oauth2/v1/userinfo
- Scopes:
 openid profile email
- Identifier / Email claim:
 email

Open a private/incognito browser window.

Log in as a test user assigned to the app.

You should be redirected successfully into Coassemble.

1. Open a private/incognito browser window.
2. Go to Coassemble → login via SSO.
3. Log in as a test user assigned to the app.
4. You should be redirected successfully into Coassemble.

System Log: Okta → Reports → System Log → filter by user.

- <code>no_matching_policy</code> → Authorization Server rule missing / misconfigured
- <code>invalid_redirect_uri</code> → Redirect URI mismatch
- <code>policy_denied</code> → Authentication policy (MFA or device restrictions) blocking the login To Configure Authorization Server Policy Change your Authorization URLs in Coassemble Authorization URL:
 https://&lt;yourOktaDomain&gt;/oauth2/default/v1/authorize
- Access Token URL:
 https://&lt;yourOktaDomain&gt;/oauth2/default/v1/token
- UserInfo URL:
 https://&lt;yourOktaDomain&gt;/oauth2/default/v1/userinfo
 This step ensures the OIDC token request succeeds.
 1. In Okta Admin: Security → API → Authorization Servers → default → Access Policies
 2. Click Add Policy:
 - Name: <code>Coassemble OIDC Token Access</code>
 - Assign to: test user(s) or a test group
 3. Click Add Rule:
 - Name: <code>Allow OAuth</code>
 - Grant type: Authorization Code
 - User: Any user assigned the app
 - Scopes: Any scopes
 - Access: Allow
 4. Move this rule to the top of the list.
 5. Save.
 This prevents the <code>no_matching_policy</code> error when Coassemble requests a token.

- System Log: Okta → Reports → System Log → filter by user.
- Common errors:
 - <code>no_matching_policy</code> → Authorization Server rule missing / misconfigured
 - <code>invalid_redirect_uri</code> → Redirect URI mismatch
 - <code>policy_denied</code> → Authentication policy (MFA or device restrictions) blocking the login To Configure Authorization Server Policy Change your Authorization URLs in Coassemble Authorization URL:
 https://&lt;yourOktaDomain&gt;/oauth2/default/v1/authorize
 - Access Token URL:
 https://&lt;yourOktaDomain&gt;/oauth2/default/v1/token
 - UserInfo URL:
 https://&lt;yourOktaDomain&gt;/oauth2/default/v1/userinfo
 This step ensures the OIDC token request succeeds.
 1. In Okta Admin: Security → API → Authorization Servers → default → Access Policies
 2. Click Add Policy:
 - Name: <code>Coassemble OIDC Token Access</code>
 - Assign to: test user(s) or a test group
 3. Click Add Rule:
 - Name: <code>Allow OAuth</code>
 - Grant type: Authorization Code
 - User: Any user assigned the app
 - Scopes: Any scopes
 - Access: Allow
 4. Move this rule to the top of the list.
 5. Save.
 This prevents the <code>no_matching_policy</code> error when Coassemble requests a token.

Make sure the Redirect URI in Okta matches exactly what Coassemble provides.

For public clients, token requests cannot satisfy hardware MFA automatically.

Test with a dedicated test user or group before rolling out to your org.

- Make sure the Redirect URI in Okta matches exactly what Coassemble provides.
- For public clients, token requests cannot satisfy hardware MFA automatically.
- Test with a dedicated test user or group before rolling out to your org.

This guide will walk you through configuring Okta so your users can log into Coassemble via SSO using OIDC.

Setting up Okta SSO with Coassemble using OAuth / OpenID Connect (OIDC)

Find answers and get help from Intercom Support and Community Experts

This site employs cookies and other technologies that we and our third party vendors use to monitor and record personal information about you and your interactions with the site (including content viewed, cursor movements, screen recordings, and chat contents) for the purposes described in our Cookie Policy. By continuing to visit our site, you agree to our {websiteTermsLink}, {privacyPolicyLink} and {cookiePolicyLink}.

This site uses cookies and similar technologies ("cookies") as strictly necessary for site operation. We and our partners also would like to set additional cookies to enable site performance analytics, functionality, advertising and social media features. See our {cookiePolicyLink} for details. You can change your cookie preferences in our Cookie Settings.

We use cookies to make our site work and also for analytics and advertising purposes. You can enable or disable optional cookies as desired. See our {cookiePolicyLink} for more details.

Advertising cookies are set by our advertising partners to collect information about your use of the site, our communications, and other online services over time and with different browsers and devices. They use this information to show you ads online that they think will interest you and measure the ads' performance. Social media cookies are set by social media platforms to enable you to share content on those platforms, and are capable of tracking information about your activity across other online services for use as described in their privacy policies.

These cookies enable the website to provide enhanced functionality and personalisation. They may be set by us or by third party providers whose services we have added to our pages. If you do not allow these cookies then some or all of these services may not function properly.

These cookies are necessary for the website to function and cannot be switched off in our systems.

These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site.

You have the right to opt out of the sale of your personal information. See our {cookiePolicyLink} for more details about how we use your data.

Your Privacy Choices

We use cookies to enhance your experience. You can customize your cookie preferences below. See our {cookiePolicyLink} for more details.

Cookie Settings

Link, Press control-option-right-arrow to exit

Empty Help Center

Uh oh. That page doesn’t exist.

Disappointed

Neutral

Smiley

Thinking...

Searching through sources...

Analyzing...

Tickets submitted through the messenger or by a support agent in your conversation will appear here.

Setting up Okta SSO with Coassemble using OAuth / OpenID Connect (OIDC)

Step 1: Create an OIDC App in Okta

Step 2: Assign Users to the App

Step 3: Configure OAuth in Coassemble

Step 4: Test SSO Login

Troubleshooting

Notes / Tips